Dell PowerSwitch S4128F-ON EMC SmartFabric OS10 User Guide Release 10.5.0 - Page 986

Example OS10(config)# service obscure-password Supported Releases 10.5.0 or later service simple-password Disables the strong password check configured with username password role and password-attributes commands. Syntax service simple-password Parameters None Default Not configured Command Mode CONFIGURATION Usage Information Use the service simple-password command to turn off the strong password checks so that you can configure passwords with no restrictions. To revert to the configured stronger password settings, use the no service simple-password command. Example OS10(config)# service simple-password Supported Releases 10.5.0 or later userrole inherit Reconfigures the default netoperator role and permissions that OS10 assigns by default to a RADIUS or TACACS+-authenticated user with an unknown user role or privilege level. You can also configure an unknown RADIUS or TACACS+ user role to inherit permissions from an existing OS10 role. Syntax Parameters userrole {default | name} inherit existing-role-name • default inherit - Reconfigure the default permissions assigned to an authenticated user with a missing or unknown role or privilege level. • name inherit - Enter the name of the RADIUS or TACACS+ user role that inherits permissions from an OS10 user role; 32 characters maximum. • existing-role-name - Assign the permissions associated with an OS10 user role: ○ sysadmin - Full access to all commands in the system, exclusive access to commands that manipulate the file system, and access to the system shell. A system administrator can create user IDs and user roles. ○ secadmin - Full access to configuration commands that set security policy and system access, such as password strength, AAA authorization, and cryptographic keys. A security administrator can display security information, such as cryptographic keys, login statistics, and log information. ○ netadmin - Full access to configuration commands that manage traffic flowing through the switch, such as routes, interfaces, and ACLs. A network administrator cannot access configuration commands for security features or view security information. ○ netoperator - Access to EXEC mode to view the current configuration with limited access. A network operator cannot modify any configuration setting on a switch. Default OS10 assigns the netoperator role to a user authenticated by a RADIUS or TACACS+ server with a missing or unknown role or privilege level. Command Mode CONFIGURATION Usage Information When a RADIUS or TACACS+ server authenticates a user and does not return a role or privilege level, or returns an unknown role or privilege level, OS10 assigns the netoperator role to the user by default. Use this command to reconfigure the default netoperator permissions. To assign OS10 user role permissions to an unknown user role, enter the RADIUS or TACACS+ name with the inherit existing-role-name value. The no version of the command resets the role to netoperator. 986 Security